最新报道:According to Bijie.com, the Google Threat Intelligence Group (GTIG) released its findings on the 17th, stating that the North Korean-linked hacker group UNC5324 is utilizing a new technique known as "Ether Hiding" to steal cryptocurrencies and gather sensitive information. The group emphasized the significance of this investigation as the first discovery of the abuse of "Ether Hiding," a technique used to conceal malware on a public decentralized blockchain, by state-sponsored threat actors. GTIG captured UNC5324 using a social engineering campaign dubbed "Contagious Interview" by Palo Alto Networks to trick developers into installing malware. This attack affected multiple operating systems, including Windows, macOS, and Linux, through a multi-stage malware infection process. The attackers stored the malware on an immutable blockchain and accessed it in "read-only" mode, allowing them to anonymously issue control commands and manipulate victim systems.